NetSight
low1.5

CVE-2011-1637

Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local user…

Impact

Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.

Affected products

VendorProductAffected versions
CiscoUnified Ip Phone 7906
All versions
CiscoUnified Ip Phone 7911g
All versions
CiscoUnified Ip Phone 7931g
All versions
CiscoUnified Ip Phone 7941g
All versions
CiscoUnified Ip Phone 7941g-Ge
All versions
CiscoUnified Ip Phone 7942g
All versions
CiscoUnified Ip Phone 7945g
All versions
CiscoUnified Ip Phone 7961g
All versions
CiscoUnified Ip Phone 7961g-Ge
All versions
CiscoUnified Ip Phone 7962g
All versions
CiscoUnified Ip Phone 7965g
All versions
CiscoUnified Ip Phone 7970g
All versions

Weakness classification

References